CVE-2014-125056

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A vulnerability was found in Pylons horus and classified as problematic. Affected by this issue is some unknown functionality of the file horus/flows/local/services.py. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitation is known to be difficult. The patch is identified as fd56ccb62ce3cbdab0484fe4f9c25c4eda6c57ec. It is recommended to apply a patch to fix this issue. VDB-217598 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-208

Affected software

No affected versions have been published.

Timeline

Published
Jan 7, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-1250579.8A vulnerability was found in mrobit robitailletheknot. It has been classified as problematic. This affects an unknown part of the file app/fCVE-2014-1250589.8A vulnerability was found in LearnMeSomeCodes project3 and classified as critical. This issue affects the function search_first_name of the CVE-2014-1250599.8A vulnerability, which was classified as problematic, has been found in sternenseemann sternenblog. This issue affects the function blog_indCVE-2014-1250609.8A vulnerability, which was classified as critical, was found in holdennb CollabCal. Affected is the function handleGet of the file calenderSCVE-2014-1250619.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in peel filebroker and classified as critical. Affected by this issue is the functCVE-2014-1250629.8A vulnerability classified as critical was found in ananich bitstorm. Affected by this vulnerability is an unknown functionality of the fileCVE-2014-1250639.8A vulnerability was found in ada-l0velace Bid and classified as critical. This issue affects some unknown processing. The manipulation leadsCVE-2014-1250659.8A vulnerability, which was classified as critical, was found in john5223 bottle-auth. Affected is an unknown function. The manipulation leadCVE-2014-1250667.5A vulnerability was found in emmflo yuko-bot. It has been declared as problematic. This vulnerability affects unknown code. The manipulationCVE-2014-1250679.8A vulnerability classified as critical was found in corincerami curiosity. Affected by this vulnerability is an unknown functionality of theCVE-2014-1250685.3A vulnerability was found in saxman maps-js-icoads and classified as critical. This issue affects some unknown processing of the file http-sCVE-2014-1250695.3A vulnerability was found in saxman maps-js-icoads. It has been classified as problematic. Affected is an unknown function. The manipulation
CVE-2014-125056: Medium severity, CVSS 5.3 | Vulnix